600
Your password has expired
(feddit.org)
This practice is not recommended anymore, yet still found in many enterprises.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 20 Aug 2024
600 points (98.9% liked)
Cybersecurity - Memes
1893 readers
2 users here now
Only the hottest memes in Cybersecurity
founded 1 year ago
MODERATORS
Only on accounts that have MFA is password rotation no longer recommended.
If the account is non MFA protected password changes are still recommend.
really? what's the standard for that? like how often should you be rotating your password?
I assumed many people forget their new passwords (because I often do) and become compromised than are protected by continually rotating passwords.
I have over 500 passwords in my password manager. I don’t know what I’d do without it.
It's one of the updated NIST recommendations, I don't recall which one but it specifically calls out no password cycling for MFA protected accounts.